Symantec IGA

 View Only
Expand all | Collapse all

Generating Reports in CA Identity Manager

  • 1.  Generating Reports in CA Identity Manager

    Posted Sep 12, 2018 01:20 AM

    Hi All,

     

    We have CA Identity Manager 14.1 version installed in our environment and trying to install reporting server to generate audit reports from CA IM. When we verified the reporting server installation steps it is mentioned to install CA Business Intelligence JasperReports® Server which is a complete different product with license.

     

    I am looking to generate Audit report like Accounts report in CA Identity Manager which provides details like which user has what access and when he got the access. Want to understand like why we dont have reports server default in CA Identity Manager as it deceives the purpose of the Identity Management System (Unable to generate Audit Reports).

     

    Any help would be appreciable.

     

    Thanks,

    Rajesh



  • 2.  Re: Generating Reports in CA Identity Manager

    Broadcom Employee
    Posted Sep 12, 2018 08:56 AM

    Yes, reporting in IM 14.1 is handled through Jaspersoft.  You can install Jaspersoft by following the directions below.

    Install and Configure CA Business Intelligence JasperReports® Server - CA Identity Manager - 14.1 - CA Technologies Docu…
     

     

    Below is a list of the default reports IM provides with Jaspersoft:

     

    Default Reports - CA Business Intelligence JasperReports® Server - CA Identity Manager - 14.1 - CA Technologies Document… 

     

    If the default reports do not meet your needs you can create custom reports.  You can also create custom reports using the IM user console:

     

    Create Custom Snapshot Reports – CA Business Intelligence JasperReports® Server - CA Identity Manager - 14.1 - CA Techno… 

    Thank you.



  • 3.  Re: Generating Reports in CA Identity Manager

    Posted Sep 12, 2018 08:56 PM

    Hi Scott,

     

    Thanks for your prompt reply. My problem is Jaspersoft is not part of CA Identity Manager Installables and it comes as a bundled with a different product and with a difference license which we dont have. How come CA is asking to user Jaspersoft as reporting server but again for using that I have to buy a complete stack of Business Intelligence product which I dont need.

     

    The product installable has to be bundled with CA Identity Manager if I have to use that for generating reports.

     

    So CA Identity Manager is not for auditing system and it is just for Password issues and Automated provisioning right.

     

    Regards,

    Rajesh



  • 4.  Re: Generating Reports in CA Identity Manager
    Best Answer

    Broadcom Employee
    Posted Sep 13, 2018 05:24 AM

    Hi Rajesh

     

    Please check this with your account team. My understanding is that all Identity Manager customers automatically get licences for Jasper as well, and it should be available in your product downloads page.

     

    For example, if I search in the downloads for "CA Identity Manager", one of the packages I see is "CA Identity Management and Governance for Business Users MULTI-PLATFORM". If you click on that link (rather than trying to download it or add to cart), you get a page with all the components in it. I get a list of 26 components and one of them is "CABI JASPERREPORTS(R) SERVER 6.3 FOR WINDOWS AND LINUX GEN500000000000081.zip".

     

    If you can't find it, ask CA Support to provide a link, and if that doesn't work, talk to your CA Account team.

     

    Pearse



  • 5.  Re: Generating Reports in CA Identity Manager

    Posted Sep 13, 2018 06:04 AM

    Thanks Kennedy for sharing the details. Yes I am able to see the installable file in the Identity Management and Governance installables packages. 

     

    Regards,

    Rajesh



  • 6.  RE: Re: Generating Reports in CA Identity Manager

    Posted Jul 09, 2019 02:56 AM
    Hi All,

    We have installed the report server in the CA Identity manager environment but unable to generate any report. Ran the 'Capture Snapshot data' which is successful but when I try to generate the report it is giving error that 'No snapshot Found'. Unable to generate any report in CA Identity Manager.

    Also can we integrate the report task with CA Identity portal as we want to generate the reports from CA Identity Portal?

    Thanks,
    Rajesh


  • 7.  RE: Re: Generating Reports in CA Identity Manager

    Broadcom Employee
    Posted Jul 09, 2019 09:45 AM
    Hi Rajesh
    We have 2 different type of reports in IM -
    1. Audit Reports - these are generated directly from the Audit DB and do not use snapshots. For this, Audit has to be enabled, to begin with - and the report task has to be configured to utilize an Audit JDBC connection, which has to be defined.
    https://docops.ca.com/ca-identity-manager/14-1/EN/administrating/reporting-using-ca-business-intelligence-jasperreports-server/run-a-non-snapshot-audit-report

    2. Snapshot Reports - These are generated from snapshots, which, in turn - have to be associated with the specific Report task.
    https://docops.ca.com/ca-identity-manager/14-1/EN/administrating/reporting-using-ca-business-intelligence-jasperreports-server/run-a-snapshot-report

    To associate a snapshot definition and connection with a report task

    1. In the User Console, go to Tasks, Roles and Tasks, Admin Tasks, Modify Admin Task.
    2. Search for the report task you want to associate a snapshot definition with.
    3. Go to the Tabs tab and click on the Edit button next to the Associate Snapshot Definitions tab.
    4. Click Add.
    5. Search for the snapshot definition to associate with the report task and click Select.
      When associating a snapshot definition with a report task, note the following:
      • A report can be associated with one or more snapshot definitions.
      • A snapshot definition can be associated with more than one report.
      • Multiple snapshots associated with a single report task must not use the same recurrence time.
    6. Click Ok.
    7. Go to the Search tab and click Browse to locate the search screens.
    8. Edit the search screen for the report task and choose rptParamConn under Connection Object for the Report.
    9. Click Ok.
    10. Click Select.
    11. Click Submit
    Regards
    Rinat Matityahu
    Principal Support Engineer
    CA Technical Support - EMEA (A Broadcom Company)


  • 8.  RE: Re: Generating Reports in CA Identity Manager

    Broadcom Employee
    Posted Jul 09, 2019 09:45 AM

    "No Snapshot found" normally occurs when a Snapshot is not associated to the report task.  Each OOTB report comes with OOTB snapshot (with the same name) which could / should be associated to the relevant report.  If you try and Modify Snapshot Definition (Reports > Snapshot Tasks > Manage Snapshot definition > Modify Snapshot Definition ) - do get a list of available snapshots (other than the ones you have created?

    https://docops.ca.com/ca-identity-manager/14-1/EN/administrating/reporting-using-ca-business-intelligence-jasperreports-server/run-a-snapshot-report

    I am not aware of a way to integrate report tasks with IP to run Jasper reports.



    ------------------------------
    Best regards,

    Scott Owens
    Sr Support Engineer
    Enterprise Software Division
    Broadcom Inc.
    ------------------------------



  • 9.  RE: Re: Generating Reports in CA Identity Manager

    Broadcom Employee
    Posted Jul 10, 2019 01:41 AM
    Identity Portal has no reporting feature and doesn't support Jasper Soft.

    If you have specific requirements for Identity Portal to integrate with reporting, please start a thread with the details and requirements that Product Management can evaluate for the next release.

    Satbeer Singh


  • 10.  RE: Re: Generating Reports in CA Identity Manager

    Posted Jun 23, 2020 06:53 AM
    Hi CA team,

    We are getting blank screen when we are trying to fetch an report task from CA User Console. We are using Jasper 7.1.1 version and CA IDM 14.3 CP1 version. jasper server is running on apace tomcat server and CA IDM is running on Weblogic 12cR2. The frame is loaded with blank screen. We have enabled the browser inspector and found that the contents (JS and CSS files) from Jasper Server are not getting rendered in CA IDM console. We have tried to enable Cross domain origin in both Apache Tomcat and Weblogic server to allow the contents to be displayed. but we are seeing 404 file not found error iam/im/EWS-C/busobjservlet/_themes/1485E4D4/*.css and *.js files. These url are dynamically formed. I have validated these files are preesent in Jasper server but not able to download.
    can you please help to resolve this issue. Any settings need to be done in apache tomcat and weblogic serve ? 
    We can not disable browser security to allow the contents but we are looking for server solution to fix this issue.


  • 11.  RE: Re: Generating Reports in CA Identity Manager

    Posted Jul 08, 2020 07:25 AM
    Hello, I have experienced similar misbehaviour, but checking the "Proxy Report Request" in IDM GUI ->System/Reporting Server Connection, made IDM render the reports.The fact is that the official installation guide for reporting turned out to contain a few wrong bits....


  • 12.  RE: Re: Generating Reports in CA Identity Manager

    Broadcom Employee
    Posted Jul 08, 2020 07:35 AM
    Hi Tomas,
    Do you have the URL and areas of the IDM doc which contain incorrect or incomplete information?  Please let me know any issues with the doc and I will be happy to have them reviewed and corrected by our documentation writers and team.  Thank you.

    ------------------------------
    Best regards,

    Scott Owens
    Sr Support Engineer

    ------------------------------
    And, as always Perhaps there are others in the communities who have experience in doing this and we invite them to comment here also.

    Another option may be to reach out to our partner HCL Technologies to see in what way they can assist further. The Enterprise Studio team of HCL can be reached at enterprisestudio@hcl.com. https://www.hcltech.com/enterprise-studio
    ------------------------------
    ------------------------------



  • 13.  RE: Re: Generating Reports in CA Identity Manager

    Posted Jul 15, 2020 04:53 AM
    Hello Scott,

    the section "Copy the required files to CA Business Intelligence JasperReports Server" in the official installation docs is a bit misleading. In fact it is too difficult to execute correctly (and check)

    a) the, mistake proven, reality is that the right keystore was not located in \CA\Identity Manager\IAM Suite\Identity Manager\tools\JasperKeyGen\keystore\ but under the JBOSS (Wildfly) installaction (JBOSS_HOME/modules/com/ca/iam/cajasper/main/iam.jks ). I was working with 14.3 vApp version and the iam.jkse in JasperKeyGen and the one deployed in wildfly were different. This lead to failed authentication between Jasper server and vApp.

    Maybe the difference was caused by some "after the installation" run of the keygen, but I have waisted a few hours trying to figure it out.

    So the installation doc should rather speficy the "used keystore" location as the copy source or at least provide some guidance on the failed authentication. With a hindsight, when I read the documentation for about fitht time, I see the correct path, but it is not quite clear. The steps should be much clearer like this
    1. Generate a new keystore
    2. Copy the new keystore to IDM Jboss/WL/WAS deployment
    3. Copy the same keystore to JasperReportServer
    4. Restart both IDM and JasperReportServer

    Then there are other reporting installation traps along the way

    b) based on my trial and error, I found that the whole OOTB reporting is not assuming split database schemas. In the production setup we separate objecstore/reporting (snapshots) and audit into separate databases. However the OOTB reports simply assume that everything is in one heap and auditing based reports fail. So far I have found the only way to make them work was to change them one by one in reporting and assign them a different JNDI data source.

    It would be nice to document this in the installation document and provide if not an OOTB solution, then at least manual DYI list of steps and reports that need to be fixed.

    c) the "report server configuration" task is not well documented. In particualar the "proxy" connection option should be explained better - when to use it and what does it mean.

    d) last but not least comment to the installlation document is that it copletely lacks a simple to execute verification scenario. Because use of the reporting (especially if you are using split databases) is more likely to fail than to work and it is very peculiar to having many configurations right it turned out to be quite difficult to run at least one, really dummy, report that would verify that the technical setup is working.  With the OOTB installation it can be wrong keystore, wrong datasource (in JR or IDM), missing data snapshot, wrong JRS setup, wrong report import, etc. And since the output I got first was a blank page it was very difficult to figure out where was the problem.


    Tomáš Fencl
    Konzultant

    CATTA Consulting s.r.o.
    Na Dolinách 1067/42, Praha 4, 147 00, CZ
    Mobil: + 420 602 280 407
    E-mail:  tfencl@catta.cz





  • 14.  RE: Re: Generating Reports in CA Identity Manager

    Broadcom Employee
    Posted Jul 15, 2020 06:17 AM
    Hi Tomas, All,

    Additional information, correlating to Tomas' reply
    The files in question iam.jks and iam.properties in question are located in both location

    There was a fix for vApp 14.2 to use a single JasperReport with multiple IM servers https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/identity-suite/14-2/release-notes/virtual-appliance-release-notes.html 00908868 / DE335361 which allow the change of the files used to secure this capability - am not certain whether this fix ever made it to 14.3.

    I agree that generating a new keystore and placing it across the setup (IM/Jasper) - is the organized approach.

    With regards to split schema - please allow me to explain
    Reporting mechanism utilizes 2 datasources - Snapshot datasource and Audit datasource.
    For Snapshot datasource, we use the Snapshot database connection tasks - there can be only one defined

    For Audit datasource, we use the JDBC connection menu to define an audit connection


    We then need to configure the report in question which datasource to use - Snapshot or Audit under Connection Object for the Report


    With regards to Proxy Report Requests - this is for use cases were the end user cannot access the report server directly (due to network / firewall settings) and therefore the request is going to the report server via IM.

    Hope the above clarifies some of the doubts and inconsistencies related to JasperReports.
    Regards
    Rinat Matityahu
    Principal Support Engineer
    Broadcom Technical Support - EMEA



  • 15.  RE: Re: Generating Reports in CA Identity Manager

    Posted Jul 26, 2020 12:11 AM
    Hi,
     Anyone facing issue while fetching the reports from Jasper Server using SSL enable. We have configured SSL settings by creating an self signed cert in Jasper Server as per the documentation. we are able to successfully established connect to Jasper Server from CA IDM with 8443 port. But we are not getting the reports in CA IDM through SSL enable. we have extracted the certificate from jasper server and put into the truststore of CA IDM under jdk cacerts. We are able to open the jasper server application from local server with https port
    We are able to access the reporting functionality with http port. we have opened the https port and checked teh network connectivity using telnet from both CA IDM and Jasper server. All is good. 
    But from CA IAM application we are getting an timeout issue and response is not getting loaded when we enable the developer tool. We arr getting "took too long to respond" error in console.
    any idea how to resolve this.



  • 16.  RE: Re: Generating Reports in CA Identity Manager

    Posted Jul 08, 2020 07:42 AM
    ​The issue has been resolved after generating a new connection object without selecting the Proxy Server checkbox. So we are directly connecting Jasper Server from CA IAM server without any proxy. With this we are able to get report from Jasper Server with non-ssl mode. With SSL, the reports are not coming due to firewall blocking the port.
    ​The issue has been resolved after generating a new connection object without selecting the Proxy Server checkbox. So we are directly connecting Jasper Server from CA IAM server without any proxy. With this we are able to get report from Jasper Server with non-ssl mode. With SSL, the reports are not coming due to firewall blocking the port.
    ​The issue has been resolved after generating a new connection object without selecting the Proxy Server checkbox. So we are directly connecting Jasper Server from CA IAM server without any proxy. With this we are able to get report from Jasper Server with non-ssl mode. With SSL, the reports are not coming due to firewall blocking the port.



  • 17.  RE: Re: Generating Reports in CA Identity Manager

    Posted Jul 08, 2020 07:47 AM
    ​The issue has been resolved after generating a new connection object without selecting the Proxy Server checkbox. So we are directly connecting Jasper Server from CA IAM server without any proxy. With this we are able to get report from Jasper Server with non-ssl mode. With SSL, the reports are not coming due to firewall blocking the port.